Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update secret name for backup-restic addon to backup-restic-s3-credentials #1880

Merged
merged 2 commits into from
Mar 7, 2022
Merged

Update secret name for backup-restic addon to backup-restic-s3-credentials #1880

merged 2 commits into from
Mar 7, 2022

Conversation

ahmedwaleedmalik
Copy link
Member

@ahmedwaleedmalik ahmedwaleedmalik commented Mar 4, 2022

Signed-off-by: Waleed Malik ahmedwaleedmalik@gmail.com

What type of PR is this?

/kind cleanup

What this PR does / why we need it:
Currently, there is a conflict between the s3-credentials secret created by KKP and KubeOne. Both use the same secret name and deploy it in the same namespace i.e. kube-system. But the keys within the secret are different for both of them.

In a bid to solve this issue, we are renaming the secret in KubeOne.

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #

Special notes for your reviewer:

Does this PR introduce a user-facing change?:

[ACTION REQUIRED] Update secret name for backup-restic addon to kubeone-backups-credentials. Manual migration steps are needed for users running KKP on top of a KubeOne installation and using both backup-restic addon from KubeOne and s3-exporter from KKP. Ensure that the `s3-credentials` Secret with keys `ACCESS_KEY_ID` and `SECRET_ACCESS_KEY` exists in `kube-system` namespace and doesn't have the label `kubeone.io/addon:`. Remove the label if it exists. Else s3-exporter won't be functional.

@kubermatic-bot kubermatic-bot added kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. release-note Denotes a PR that will be considered when it comes time to generate release notes. dco-signoff: yes Denotes that all commits in the pull request have the valid DCO signoff message. labels Mar 4, 2022
@kubermatic-bot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ahmedwaleedmalik

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kubermatic-bot kubermatic-bot added approved Indicates a PR has been approved by an approver from all required OWNERS files. size/L Denotes a PR that changes 100-499 lines, ignoring generated files. labels Mar 4, 2022
…tials

Signed-off-by: Waleed Malik <ahmedwaleedmalik@gmail.com>
@ahmedwaleedmalik ahmedwaleedmalik requested a review from kron4eg March 4, 2022 11:36
Signed-off-by: Waleed Malik <ahmedwaleedmalik@gmail.com>
@xmudrii
Copy link
Member

xmudrii commented Mar 4, 2022

@ahmedwaleedmalik Can you please add [ACTION REQUIRED] release note and mention that users using both this addon and s3-exporter should take additional steps?

@ahmedwaleedmalik
Copy link
Member Author

@xmudrii Do they really have to? As in when they'll update kubeone, the new dedicated secret will be used for this addon. And the de-coupling would be removed.

Same will happen if they update KKP first.

@ahmedwaleedmalik
Copy link
Member Author

Are you talking about the case where a K1 update would prune/remove the existing s3-credentials?

@xmudrii
Copy link
Member

xmudrii commented Mar 4, 2022

@ahmedwaleedmalik Yes, I was talking about pruning the s3-credentials Secret.

@kubermatic-bot kubermatic-bot added release-note-action-required Denotes a PR that introduces potentially breaking changes that require user action. and removed release-note Denotes a PR that will be considered when it comes time to generate release notes. labels Mar 4, 2022
@ahmedwaleedmalik
Copy link
Member Author

/retest

@kubermatic-bot kubermatic-bot added the lgtm Indicates that a PR is ready to be merged. label Mar 7, 2022
@kubermatic-bot
Copy link
Contributor

LGTM label has been added.

Git tree hash: e6ec3b2301be4bd432b420b5be659aa0ce10aa63

@kubermatic-bot kubermatic-bot merged commit 8885376 into kubermatic:master Mar 7, 2022
@kubermatic-bot kubermatic-bot added this to the KubeOne 1.5 milestone Mar 7, 2022
@ahmedwaleedmalik ahmedwaleedmalik deleted the update-backup-restic-secret branch March 9, 2022 11:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. dco-signoff: yes Denotes that all commits in the pull request have the valid DCO signoff message. kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. lgtm Indicates that a PR is ready to be merged. release-note-action-required Denotes a PR that introduces potentially breaking changes that require user action. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants